CISA Known Exploited Vulnerabilities
KEV additions — May 2023
13 CVEs entered the KEV catalog in May 2023.
Added May 31, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-28771 | Zyxel Multiple Firewalls OS Command Injection Vulnerability | 9.8 | 94.3 % | June 21, 2023 |
Added May 26, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-2868 | Barracuda Networks ESG Appliance Improper Input Validation Vulnerability | 9.8 | 89.5 % | June 16, 2023 |
Added May 22, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-28204 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 6.5 | 0.1 % | June 12, 2023 |
| CVE-2023-32373 | Apple Multiple Products WebKit Use-After-Free Vulnerability | 8.8 | 0.0 % | June 12, 2023 |
| CVE-2023-32409 | Apple Multiple Products WebKit Sandbox Escape Vulnerability | 8.6 | 0.3 % | June 12, 2023 |
Added May 19, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-21492 | Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | 4.4 | 0.4 % | June 9, 2023 |
Added May 12, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2016-8735 | Apache Tomcat Remote Code Execution Vulnerability | 9.8 | 90.3 % | June 2, 2023 |
| CVE-2021-3560 | Red Hat Polkit Incorrect Authorization Vulnerability | 7.8 | 10.9 % | June 2, 2023 |
| CVE-2023-25717 | Multiple Ruckus Wireless Products CSRF and RCE Vulnerability | 9.8 | 94.2 % | June 2, 2023 |
Added May 9, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-29336 | Microsoft Win32K Privilege Escalation Vulnerability | 7.8 | 79.5 % | May 30, 2023 |
Added May 1, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-45046ransomware | Apache Log4j2 Deserialization of Untrusted Data Vulnerability | 9 | 94.3 % | May 22, 2023 |
| CVE-2023-1389 | TP-Link Archer AX-21 Command Injection Vulnerability | 8.8 | 93.6 % | May 22, 2023 |
| CVE-2023-21839 | Oracle WebLogic Server Unspecified Vulnerability | 7.5 | 94.1 % | May 22, 2023 |